32 matches found
EUVD-2014-9721
Malware in sbrugna...
EUVD-2014-9724
Malware in sbrugna...
EUVD-2014-9723
Malware in sbrugna...
EUVD-2014-9722
Malware in sbrugna...
Cross site scripting
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...
Cross site scripting
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...
CVE-2014-9918
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...
CVE-2014-9917
An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter...
CVE-2014-9919
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...
Cross site scripting
An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter...
CVE-2014-9917
An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter...
CVE-2014-9917
CVE-2014-9917 affects Bilboplanet 2.0. The issue is a stored XSS vulnerability triggered when adding a tag via the URL parameter in user/?page=tribes tags. The root cause is unsanitized input in tag handling, allowing injected script to be stored and later rendered to other users. Impact is descr...
CVE-2014-9918
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...
CVE-2014-9918
The connected documents confirm a Stored XSS vulnerability in Bilboplanet 2.0 affecting the signup.php endpoint via the user_id parameter. Root cause and technical details are not expanded beyond this description in the provided sources; no explicit exploit code or affected versions are listed. P...
CVE-2014-9919
CVE-2014-9919 affects Bilboplanet 2.0 with a Stored XSS in the signup.php fullname parameter. The NVD entry lists a CVSS‑v3 base score of 6.1 (MEDIUM): AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, i.e., network attack, no availability impact, but partial confidentiality/integrity impact with user interac...
CVE-2014-9919
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...
PT-2019-7155
Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description A stored XSS issue was found when adding a tag via the "user/?page=tribes" API endpoint, specifically through the tags parameter. Recommendations For Bilboplanet version 2.0, as a temporary workaround,...
PT-2019-7157
Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description A stored XSS issue exists due to improper handling of user input in the fullname parameter to the "signup.php" endpoint. Recommendations For Bilboplanet version 2.0, update the software to a version that...
CVE-2014-9917: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter...
CVE-2014-9918: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...